General
- Target Linux_amd64
- Size 2.3MB
- Sample260604-wwfvvact7p
- SHA256 a8875c3bad30270efe07611b8f68546d6cb6ab19f0105319ebaba0d624bab0bf
- MD5 1a5edcf40f9d95c0c8fddc501ebd9f8c
- SHA1 8d4869df5df1a9a88e0d0a9d838c71f5e7aba939
- SHA512 2da4c2507773713b755a1cc71f7d003afd51510611744fb52d1a6c63f603638616a8a8500d0049a36903c6a5ee4fb692398cd35ad03716aa61dfd06bd327d587
- SSDEEP 49152:5k3aKkGa7HCrJd+Th/MGkputLSNarbhnRquxrvmv8g6UGtchp:5kDkGa7HCP+lmCrXVxji8HbIp
- TLSH T1A3B533EF134CC1ED3DB15874236926F2621B282F92966D5F0C61EEC421F8D1EACEB845
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Linux_amd64
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
stealthworker
Targets
-
- Target Linux_amd64
- Size 2.3MB
- SHA256 a8875c3bad30270efe07611b8f68546d6cb6ab19f0105319ebaba0d624bab0bf
- MD5 1a5edcf40f9d95c0c8fddc501ebd9f8c
- SHA1 8d4869df5df1a9a88e0d0a9d838c71f5e7aba939
- SHA512 2da4c2507773713b755a1cc71f7d003afd51510611744fb52d1a6c63f603638616a8a8500d0049a36903c6a5ee4fb692398cd35ad03716aa61dfd06bd327d587
- SSDEEP 49152:5k3aKkGa7HCrJd+Th/MGkputLSNarbhnRquxrvmv8g6UGtchp:5kDkGa7HCP+lmCrXVxji8HbIp
- TLSH T1A3B533EF134CC1ED3DB15874236926F2621B282F92966D5F0C61EEC421F8D1EACEB845
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.